Known vulnerabilities in IBM OpenPages with Watson - page 3

Vendor: IBM Corporation
Software: IBM OpenPages with Watson
Software CPE: cpe:2.3:a:ibm_corporation:ibm_openpages_with_watson:*:*:*:*:*:*:*:*
Website: https://www.ibm.com/us-en
Total vulnerabilities: 275
Public exploits: 12
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting IBM OpenPages with Watson IBM OpenPages with Watson is affected by 275 known vulnerabilities: 37 high, 150 medium, 88 low Critical High Medium Low

Vulnerabilities (275)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123913 - Improper Access Control
CVE-2024-29371		 CWE-284 Medium
No
No
 - 12.03.2026 SB2026031212
SB2026031213
SB2026031310
and 29 more
#VU123159 - Incorrect Calculation of Buffer Size
CVE-2026-1188		 CWE-131 High
No
No
 - 24.02.2026 SB2026022412
SB2026022413
SB2026022531
and 46 more
#VU122748 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-14914		 CWE-22 Low
No
No
 - 12.02.2026 SB2026021209
SB2026021210
SB2026021212
and 23 more
#VU122747 - Improper input validation
CVE-2025-13867		 CWE-20 Medium
No
No
 9.1.3 12.02.2026 SB2026021208
SB2026021211
SB2026021216
and 5 more
#VU122746 - Improper Neutralization of Special Elements in Data Query Logic
CVE-2025-14689		 CWE-943 Medium
No
No
 9.1.3 12.02.2026 SB2026021207
SB2026021213
SB2026021215
and 5 more
#VU122744 - Unprotected Storage of Credentials
CVE-2025-36425		 CWE-256 Low
No
No
 9.1.3 12.02.2026 SB2026021205
SB2026022012
SB2026030931
and 3 more
#VU122743 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2025-36247		 CWE-611 Medium
No
No
 9.1.3 12.02.2026 SB2026021204
SB2026022012
SB2026030931
and 3 more
#VU121727 - Improper input validation
CVE-2026-21945		 CWE-20 Medium
No
No
 - 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 97 more
#VU121728 - Improper input validation
CVE-2026-21932		 CWE-20 Medium
No
No
 - 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 78 more
#VU121729 - Improper input validation
CVE-2026-21933		 CWE-20 Medium
No
No
 - 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 91 more
#VU121730 - Out-of-bounds read
CVE-2026-21925		 CWE-125 Medium
No
No
 - 20.01.2026 SB20260120152
SB20260120153
SB20260120154
and 93 more
#VU119901 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-12635		 CWE-79 Medium
No
No
 - 12.12.2025 SB2025121283
SB2025121517
SB2025121518
and 42 more
#VU119149 - Improper Neutralization of Server-Side Includes (SSI) Within a Web Page
CVE-2025-58098		 CWE-97 Low
Available
No
 9.0.5.26 04.12.2025 SB2025120441
SB2025121923
SB2025121940
and 47 more
#VU119148 - Server-Side Request Forgery (SSRF)
CVE-2025-59775		 CWE-918 Medium
No
No
 9.0.5.26 04.12.2025 SB2025120441
SB2026010820
SB20260114117
and 11 more
#VU119147 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2025-65082		 CWE-74 Low
No
No
 9.0.5.26 04.12.2025 SB2025120441
SB2025121923
SB2025122202
and 33 more
#VU119146 - Improper input validation
CVE-2025-66200		 CWE-20 Low
No
No
 9.0.5.26 04.12.2025 SB2025120441
SB2025121923
SB2025122202
and 31 more
#VU117483 - Improper input validation
CVE-2025-53066		 CWE-20 Medium
No
No
 - 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 118 more
#VU117484 - Improper input validation
CVE-2025-53057		 CWE-20 Medium
No
No
 - 22.10.2025 SB20251022107
SB20251022108
SB20251022109
and 121 more
#VU115751 - Resource exhaustion
CVE-2025-59375		 CWE-400 Medium
No
No
 9.0.5.26 17.09.2025 SB2025091783
SB2025091789
SB2025091790
and 112 more
#VU114346 - Command injection
CVE-2025-7962		 CWE-77 Medium
No
No
 - 21.08.2025 SB2025082145
SB2025082146
SB2025082147
and 58 more


Showing elements 41 - 60 out of 275